Privacy Policy
Mr Loo (ABN 31 525 926 614) ("we", "us", "our") provides toilet and general plumbing services in Queensland. This policy explains what personal information we collect through mrloo.au and in the course of our work, how we use it, who we share it with, and how you can access it or complain about it.
We are a small business. Under the Privacy Act 1988 (Cth), businesses with an annual turnover of $3 million or less are generally not bound by the Australian Privacy Principles. We have chosen to follow them anyway, and we hold ourselves to this policy.
1. What we collect
1.1 Information you give us
When you contact us through our website, by phone, or in person, we collect:
- your name and the way you would like us to contact you
- your phone number and email address
- the address of the property where the work is needed
- what you need done, and anything else you choose to tell us
- any photos or files you choose to upload with your enquiry
When you send our enquiry form, a copy of what you sent (your details and any photos) is kept by KINGTRADIE, who run the form for us, and your enquiry is added to our job system, ServiceM8, as a job on your customer record. We email you to confirm we have your details, and the business owner is told about your enquiry by email.
1.2 Information collected automatically on our website
We use Google Analytics to understand how people find and use our site. It collects the pages you view, how you arrived, your general device information, and your approximate location.
About your IP address. Google Analytics collects your IP address. It is used to work out your approximate location (at about city level) and to filter out spam traffic. Google does not link raw IP addresses to individual user identifiers, and discards them after use. Where we link our Google Analytics to a Google Ads account to measure our advertising, your IP address may also pass to Google Ads in an encrypted form that cannot identify you. You can read how Google handles this data at google.com/policies/privacy/partners.
We use the Meta (Facebook) Pixel to measure how well our Facebook and Instagram ads work. It tells us that someone who saw an ad later visited our site or made an enquiry. You can control how Meta uses your information for advertising in your Facebook and Instagram ad settings.
Our website is hosted and protected by Cloudflare, which processes your IP address and basic request information to deliver the site and to filter malicious traffic. Our enquiry form uses Cloudflare Turnstile to tell people from automated programs; it may set a cookie and reads basic information about your browser and connection to do that.
Our locations section shows a Google Maps embed. When that section loads, content is requested from Google and Google may set its own cookies.
1.3 What we do not collect
We do not ask for government identifiers (Medicare, driver licence, passport, tax file number), we do not take payments through this website, and we do not collect sensitive information such as your health, race, religion or political views.
If you send us sensitive information by accident through the enquiry form, we will delete it once we have dealt with your enquiry, unless we are legally required to keep it.
2. Why we use it
We use your information to:
- reply to your enquiry and give you a quote
- schedule and carry out the work you engage us to do
- invoice you and follow up unpaid invoices
- contact you about the job, including reminders and any warranty issue
- meet our obligations under Queensland licensing, work health and safety, tax and consumer law
- understand how our website is used, so we can improve it
When we get back to you about your enquiry or your job, we may do so by phone, email or text message, using the contact details you gave us. If you would rather we only used one of these, just tell us.
We will not add you to a marketing list just because you sent us an enquiry. If you choose to opt in, we may occasionally send you news, reminders or offers about our services, and every message includes an easy way to unsubscribe. You can tell us to stop at any time.
We will not use your information for anything else without asking you first.
3. Who we share it with
3.1 Our systems
| Who | What they do for us | Where they hold the data | Their privacy policy |
|---|---|---|---|
| KINGTRADIE | Our website and marketing agency. It runs the enquiry form on our website and the system behind it, which keeps a copy of each enquiry (including photos), puts it into our job system, emails you a confirmation, and emails the business owner about it. It also filters out sales pitches and spam sent through the form: a set of rules looks at the message, the name and the email address you typed, and for borderline messages an automated classifier reads the message text with phone numbers and email addresses removed (a name typed into the message itself is not removed). | On Cloudflare's network (see Cloudflare below). KINGTRADIE is an Australian business. | kingtradie.com/privacy-policy |
| ServiceM8 | Our job management system. Your enquiry, your contact details and any photos you send are stored on your customer record so we can quote, book and do the work. | ServiceM8 says it stores data in multiple locations around the world, including the United States, Australia, Ireland, Singapore and Tokyo, hosted on Amazon Web Services, with ServiceM8 in Australia administering data access (its security page) | servicem8.com/au/privacy-policy |
| Amazon Web Services | Sends our emails: the confirmation that we have your enquiry, and the alert to the business owner. | Our account uses Amazon's Sydney region. Amazon says the customer chooses the Region and that it does not move or replicate content outside it without the customer's agreement. Amazon is a United States company. | aws.amazon.com/privacy |
| Website analytics, and the map on our locations section. | Data centres around the world. Google says your information may be processed on servers outside the country where you live. | policies.google.com/privacy | |
| Meta | Measures how well our Facebook and Instagram ads work. | Meta says information is transferred to, stored and processed in places where it has infrastructure or data centres, including the United States, Ireland, Denmark and Sweden, amongst others, and in other countries where its partners and providers are located. | facebook.com/privacy/policy |
| Cloudflare | Hosts our website, protects it from attacks and spam (including the Turnstile check on our enquiry form), and runs the KINGTRADIE system that handles enquiries, stores the copy of each one and runs the spam classifier. | Cloudflare says it primarily stores information in the United States and the European Economic Area and may transfer and access it from around the world. Our database and the stored copies of enquiries are set to Cloudflare's Oceania region, which Cloudflare treats as a best effort rather than a guarantee. Cloudflare says it does not keep what the spam classifier is given once the request is answered, and does not use it to train models. | cloudflare.com/privacypolicy |
3.2 Other people we may share it with
- Suppliers and subcontractors, but only what they need to do the job.
- Our accountant and insurer, where a job or a claim requires it.
- Anyone we are legally required to tell, such as in response to a court order.
3.3 What we never do
- We never sell your personal information.
- We never share it with data brokers or third-party marketing lists.
4. Information sent overseas
Several of the services listed in Section 3.1 are based overseas or keep data in more than one country, so your information may be stored or handled outside Australia. ServiceM8 says it stores data in multiple locations around the world, including the United States, Australia, Ireland, Singapore and Tokyo. Cloudflare is a United States company with a worldwide network; our database and the copies of enquiries are set to its Oceania region on a best-effort basis. Amazon sends our emails from its Sydney region and is a United States company. Google and Meta process analytics and advertising data in data centres around the world, including the United States. We choose our providers on the basis that they have their own published privacy commitments, which are linked in the table above.
5. How long we keep it
| What | How long | Why |
|---|---|---|
| Enquiries and quotes that did not become jobs | 2 years from your last contact with us | So we can pick up the conversation if you come back to us |
| The copy of your enquiry kept by KINGTRADIE's system (including photos) | 2 years from the enquiry | So an enquiry is never lost if our job system is unavailable, and so a problem can be checked |
| Records of jobs we completed | 7 years from completion | Tax and licensing record-keeping |
| Warranty records | The length of the warranty, plus 2 years | To handle warranty claims |
| Website analytics | 14 months | Google Analytics retention setting |
After that, we delete it.
6. Cookies
Our website uses cookies. Some are needed for the site to work. Others are set by Google Analytics to measure how the site is used, by Meta to measure our advertising, and by Google when the page shows a map.
Why there is no cookie pop-up. Australian privacy law does not require the cookie consent banner used in Europe and the UK. What it requires is that we tell you plainly what we collect, which is what this policy does.
You can turn off analytics tracking using the Google Analytics opt-out add-on, a browser extension that blocks trackers, or your browser's private browsing mode. Blocking cookies will not stop you using our site or contacting us.
7. Your choices
Getting a copy, or fixing something. Email us at [email protected] and we will send you what we hold about you, or correct it. We will get back to you within 30 days. There is no charge.
Having it deleted. Ask us and we will delete it, unless we have to keep it for the tax or licensing periods in Section 5.
Stopping marketing messages. If you have opted in to hear from us, use the unsubscribe link in any email, reply STOP to any text message, or just email us. We action it within 5 working days.
8. How we protect it
- Our website runs over an encrypted connection (HTTPS).
- Our host, Cloudflare, filters malicious traffic before it reaches the site.
- Only the people who need your details to deal with your enquiry and do your job can see them. Depending on the job, that can include the owner, our office and admin staff, and the tradespeople or subcontractors carrying out the work. Nobody else has access.
No system is completely secure. If your information is caught up in a data breach that is likely to cause you serious harm, we will tell you and tell you what to do about it.
9. Complaints
If you are unhappy with how we have handled your information, email [email protected] and tell us. We will respond within 30 days.
If you are not satisfied with our answer, you can take it to:
- the Office of the Australian Information Commissioner at oaic.gov.au or 1300 363 992
- the Office of Fair Trading Queensland, for consumer matters in Queensland
10. Changes
If we change this policy we will update the date at the top of the page.
11. Contact us
Mr Loo
ABN 31 525 926 614
Licensed plumber, Queensland Building and Construction Commission (QBCC licence 15046923)
Serving Brisbane, North Brisbane and the Sunshine Coast, Queensland
Phone: 0431 348 571
Email: [email protected]